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Abstract. Trace semantics has been defined for various kinds of state-based systems, 
notably with different forms of branching such as non-determinism vs. probability. In this 
paper we claim to identify one underlying mathematical structure behind these "trace 
semantics," namely coinduction in a Kleisli category. This claim is based on our technical 
result that, under a suitably order-enriched setting, a final coalgebra in a Kleisli category 
is given by an initial algebra in the category Sets. Formerly the theory of coalgebras 
has been employed mostly in Sets where coinduction yields a finer process semantics of 
bisimilarity. Therefore this paper extends the application field of coalgebras, providing a 
new instance of the principle "process semantics via coinduction." 



Trace semantics is a commonly used semantic relation for reasoning about state-based 
systems. Trace semantics for labeled transition systems is found on the coarsest edge of the 
linear time-branching time spectrum [57] . Moreover, trace semantics is defined for a variety 
of systems, among which are probabilistic systems [49]. 

In this paper we claim that these various forms of "trace semantics" are instances of 
a general construction, namely coinduction in a Kleisli category. Our point of view here is 
categorical, coalgebraic in particular. Hence this paper demonstrates the abstraction power 
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of categorical/coalgebraic methods in computer science, uncovering basic mathematical 
structures underlying various concrete examples. 



1.1. "Trace semantics" in various contexts. First we motivate our contribution through 
examples of various forms of "trace semantics." Think of the following three state-based, 
branching systems. 

A context-free grammar 




(for Peano Arithmetic) 


Terminal symbols: 


0,s 


Non-terminal symbol: 


T 


Generation rules: 




T ^ 




T ^ sT 





(1.1) 



The first one is a non-deterministic system with a special state / denoting successful 
termination. To its state x we can assign its trace set: 

tr{x) = {a, ab, abb,... } = ab* , (1.2) 

that is, the set of the possible linear-time behavior (namely words) that can arise through 
an execution of the systemQ In this case the trace set tr{x) is also called the accepted 
language; formally it is defined (co) recursively by the following equations. For an arbitrary 
state x, 

G tr(x) <;=^ X ^ / 
a • cr G tr(a;) 3y. {x y A a G tr(y) ) 

Here () denotes the empty word; a = aia2 ... a„ is a word. 

The second system has a different type of branching, namely probabilistic branching. 

, a[l/3] , , ... 

Here x — > y denotes: at the state x , a transition to y outputtmg a occurs with 
probability 1/3. Now, to the state x', we can assign its trace distribution: 



(1.3) 



tr{x) 







1 

2' 



1 

2' 



(1.4) 



(1.5) 



that is, the probability distribution over the set of linear-time behavior^ Its formal 
(corecursive) definition is as follows. 

tr(x)(()) = Pr(x^/) ,^ 
tr(x)(a-(j) = Eyex PK^; ^ y) •tr(y)(a) , 

where Pr(. . . ) denotes the probability of a transition. 

The third example can be thought of as a state-based system, with non-terminal symbols 
as states. It is non-deterministic because a state T has two possible transitions. It is 
natural to call the following set of parse-trees its "trace semantics." 



tr(T) 



6 



The infinite trace ab" is out of our scope here: we wiU elaborate this point later in Section |4~2 
^Here again, we do not consider the infinite trace a" i— *■ 1/3. 
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It is again a set of "linear-time behavior" as in the first example, although the notion 
of linear-time behavior is different here. Linear-time behavior — that is, what we observe 
after we have resolved all the non-deterministic branchings in the system — is now a parse- 
tree instead of a word. 



1.2. Coalgebras and coinduction. In recent years the theory of coalgebras has emerged 
as the "mathematics of state-based systems" [25,26,47]. In the categorical theory of coalge- 
bras, an important definition/reasoning principle is coinduction: a system (identified with 
a coalgebra c : X — > FX) is assigned a unique morphism behc into the final coalgebra. 

F(behc) 

FX ^FZ 



The success of coalgebras is largely due to the fact that, when Sets is taken as the base 
category, the final coalgebra semantics is fully abstract with respect to the conventional 

c d 

notion of bisimilarity: for states x and y of coalgebras X FX and Y FY, 

behc(x) = beh(i(?/) <^=^ x and y are bisimilar. 

This is the case for a wide variety of systems (i.e. for a variety of functors F), hence 
coinduction in Sets captures bisimilarity. 

However, there is not so much work so far that captures other behavioral equivalences 
(coarser than bisimilarity) by the categorical principle of coinduction. The current work — 
capturing trace semantics by coinduction in a Kleisli category — therefore extends the ap- 
plication field of the theory of coalgebras. 



1.3. Our contributions. Our technical contributions are summarized as follows. Assume 
that r is a monad on Sets which has a suitable order structure; we shall denote its Kleisli 
category by 0(T). 

• Trace semantics via coinduction in a Kleisli category. Commutativity of the coinduction 
diagram 



FX 

4 
X - 



^FZ 

— ^final 

- -> z 



m 



ia{T), 

the Kleisli category for 



(1.6) 



is shown to be equivalent to the conventional recursive definition of trace semantics such 
as ()1.3p and (jl.Sp . This is true for both trace set semantics (for non-deterministic systems) 
and trace distribution semantics (for probabilistic systems). The induced arrow trc thus 
gives (conventional) trace semantics for a system c. 
Identification of the final coalgebra in a Kleisli category. We show that 



an initial algebra in Sets 

coincides with 
a final coalgebra in K£{T). 
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In particular, the final coalgebra in Rel is the initial algebra in Sets, because the category 
Rel of sets and relations is a Kleisli category for a suitable monad. This coincidence 
happens in the following two steps: 

- the initial algebra in Sets lifts to a Kleisli category, due to a suitable adjunction- lifting 
result; 

- in a Kleisli category we have initial algebra-final coalgebra coincidence. Here we use the 
classical result by Smyth and Plotkin [51], namely limit- colimit coincidence which is 
applicable in a suitably order-enriched category. 

Note the presence of two parameters in (II. 6p : a monad T and an endofunctor F, both 
on Sets. The monad T specifies the branching type of systems. We have three leading 
examples 

• the powerset monad V modeling non- deterministic or possibilistic branching; 

• the subdistribution monad V 

VX = {d: X ^[0,1]\Y^ d{x) < 1} 

xex 

modeling probabilistic branching; and 

• the lift monad C = !+(_) modeling system with exception (or deadlock, non-termination). 
The functor F specifies the transition type of systems: our understanding of "transition 
type" shall be clarified by the following examples. 

• In labeled transition systems (LTSs) with explicit termination — no matter if they are 
non-deterministic or even probabilistic — a state either 

- terminates {x — > /), or 

- outputs one symbol and moves to another state {x x'), 

in one transition. This "transition type" is expressed by the functor FX = 1 -\- T, x X , 
where E is the output alphabet and 1 = {/}. 

• In context-free grammars (CFGs) as state-based systems, a state evolves into a sequence 
of terminal and non-terminal symbols in a transition. The functor 

FX = {T. + X)* 

with S being the set of terminal symbols, expresses this transition type. 
Clear separation of branching and transition types is important in our generic treatment of 
trace semantics. The transition type F determines the set of linear-time behavior (which is 
in fact given by the initial -F-algebra in Sets). We model a system by a coalgebra X FX 
in the Kleisli category K£{T) — see (II. 6p — where F is a suitable lifting of F in K£{T). By 
the definition of a Kleisli category we will easily see the following bijective correspondence. 

X — "-^TX in ia{T) 

X "—fTFX in Sets 

Hence our system — a function of the type X — > TFX — first resolves a branching of type T 
and then makes a transition of type F. Many branching systems allow such representation 
so that our generic coalgebraic trace semantics applies to them. 

"^Other examples include the monad X (N U {oo})^ for multisets, the monad X ^-* \0,oq\^ for real 
valuations, and the monad X P(M x _) with a monoid M for timed systems (cf. [29]). These monads 
can be treated in a similar way as our leading examples. We leave out the details. 
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1.4. Generic theory of traces and simulations. In the study of coalgebras as 'categor- 
ical presentation of state-based systems', there are three ingredients playing crucial roles: 
coalgebras as systems; coinduction yielding process semantics; and morphisms of coalgebras 
as behavior-preserving maps. In this paper we study the first two in a Kleisli category. 
What about morphisms of coalgebras? 

In [14] this question is answered by identifying lax/oplax morphisms of coalgebras in 
a Kleisli category as forward/backward simulations. Use of traces and simulations is a 
common technique in formal verification of systems (see e.g. [41]): a desirable property 
is expressed in terms of traces; and then a system is shown to satisfy the property by 
finding a suitable simulation. Therefore this paper, together with [14], forms an essential 
part of developing a "generic theory of traces and simulations" using coalgebras in a Kleisli 
category. The categorical genericity — especially the fact that we can treat non-deterministic 
and probabilistic branching in a uniform manner — is exploited in [19] to obtain a simulation- 
based proof method for a probabilistic notion of anonymity for network protocols. Currently 
we are investigating how much more applicational impact can be brought about by our 
generic theory of traces and simulations. 

1.5. Testing and trace semantics. Since the emergence of the theory of coalgebras, the 
significance of modal logics as specification languages has been noticed by many authors. 
This is exemplified by the slogan in [36]: 'modal logic is to coalgebras what equational 
logic is to algebras'. Inspired by coalgebras on Stone spaces and the corresponding modal 
logic, recent developments [5,6,31,32,34,37,45] have identified the following situation as 
the essential mathematical structure underlying modal logics for coalgebras. 

p 

pop (^C°P^;^^^^^^^^^^2Z^^'^ together with MP ^ PF°p 
5°P 

In fact, it is noticed in [45] that such a situation not only hosts a modal logic but also a more 
general notion of testing (in the sense of [53,57], also called testing scenarios). Therefore 
we shall call the above situation a testing situation. 

In the last technical section of the paper we investigate coalgebraic trace semantics for 
the special case T = V (modeling non-determinism) from this testing point of view. First, 
we present some basic facts on testing situations, especially on the relationship between the 
induced testing equivalence and the final coalgebra semantics. These two process equiva- 
lences are categorically presented as kernel pairs, which enables a fairly simple presentation 
of the theory of coalgebraic testing. In addition, we observe that the coinduction scheme 
in the Kleisli category K£{V) gives rise to a canonical testing situation, in which the set of 
tests is given by an initial -F-algebra. 

The material on testing in the last section has not been presented in the earlier ver- 
sions [16, 17] of this paper. 

1.6. Organization of the paper. In Section [2] we observe that a coalgebra in a Kleisli 
category is an appropriate "denotation" of a branching system, when we focus on trace 
semantics. In Section [3] we present our main technical result that an initial algebra in Sets 
yields a final coalgebra in K1{T). The relationship to axiomatic domain theory — which 
employs similar mathematical arguments — is also discussed here. Section [4] presents some 
examples of the use of coinduction in K£{T) and argues that the coinduction principle is 
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a general form of trace semantics. In Section [5] we review the preceding material from the 
testing point of view. 

2. COALGEBRAS IN A KLEISLI CATEGORY 

In the study of coalgebras as "categorical presentations of state-based systems," the 
category Sets of sets and functions has been traditionally taken as a base category (see 
e.g. [25,47]). An important fact in such a setting is that bisimilarity is often captured by 
coinduction]^ 

However, bisimilarity is not the only process equivalence. In some applications one 
would like coarser equivalences, for example in order to abstract away internal branching 
structures. One of such coarser semantics, which has been extensively studied, is trace 
equivalence. For example, the process algebra CSP [21] has trace semantics as its operational 
model. Trace equivalence is coarser than bisimilarity, as the following classic example of 
"trace-equivalent but not bisimilar" systems illustrates. 

X y 

i/ \ H 

• • b * c 

• • • • 

It is first noticed in [46] that the Kleisli category for the powerset monad is an appro- 
priate base category for trace semantics for non-deterministic systems. This observation is 
pursued further in [16,17,24]. In [15] it is recognized that the same is true for the subdis- 
tribution monad for probabilistic systems. The current paper provides a unified framework 
which yields those preceding results, in terms of Cppo-enrichment of a Kleisli category; see 
Section [2.31 In this section we first aim to justify the use of coalgebras in a Kleisli category. 

2.1. Monads and Kleisli categories. Here we recall the relevant facts about monads 
and Kleisli categories. For simplicity we exclusively consider monads on Sets. 
A monad on Sets is a categorical construct. It consists of 

• an endofunctor T on Sets; 

• a unit natural transformation r/ : id =^ T, that is, a function X ^ TX for each set X 
satisfying a suitable naturality condition; and 

• a multiplication natural transformation n : ^ T, consisting of functions T^X ^ TX 
with X ranging over sets. 

The unit and multiplication are required to satisfy the following compatibility conditions. 

TX^T^X^TX T^X^T^X 

fJ-TX MX 



See [3,42] for the details. 





TX T'^X TX 



^Non-examples include LTSs with unbounded branching degree. They are modeled as coalgebras for 
FX — P(E X X). Lambek's Lemma readily shows that this choice of F does not have a final coalgebra in 
Sets, because it would imply an isomorphism Z ^ 'P(E x Z) which is impossible for cardinality reasons. 
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The monad structures play a crucial role in modeling "branching." Intuitively, the 
unit r] embeds a non-branching behavior as a trivial branching (with only one possibility 
to choose). The multiplication fi "flattens" two successive branchings into one branching, 
abstracting away internal branchings: 




(2.1) 



The following examples will illustrate how this flattening phenomenon is a crucial feature 
of trace semantics. 

In this paper we concentrate on the three monads mentioned in the introduction: C, V 
and v. 

• The lift monad C = 1 + (_) — where we denote 1 = {_L} with _L meaning deadlock — has 
a standard monad structure induced by a coproduct. For example, the multiplication 
/i^ :1-|-1-|-X— carries x ^ X to itself and both _L's to _L. 

• The powerset monad V has a unit given by singletons and a multiplication given by 
unions. The monad V models non-deterministic branching: the "flattening" in (12. ip 
corresponds to the following application of the multiplication of V. 



VVX 



m5 



— >vx 

{x,y,z} 



{{x,y},{z}} I 

The monad "P's action on arrows (as a functor) is given by direct images: for f : X ^ Y, 
the function Vf : VX — > VY carries a subset u C X to the subset {/(x) \ x £ u} (^Y. 
The subdistribution monad V has a unit given by the Dirac distributions. 



X - 

x h 



-^VX 



X I— > 1 



r' 1-^ (for x' 7^ x) 

Its multiplication is given by multiplying the probabilities along the way. That is, 
which models "flattening" of the following kind. 



1/3 



2/3 



X 

z 




that is, 



X 

y I 



1/2 
1/2 

-1] 



1/3 
2/3 



X 

y 

z 



1/6 
1/6 
2/3 



The monad P's action on arrows (as a functor) is given as a suitable adaptation of 
"direct images." Namely, for f : X ^ Y, the function Df : T>X VY carries d € VX 
to [y^E.ef'Hy) dix)]eVY. 
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Given any monad T, its Kleisli category K£{T) is defined as follows. Its objects are the 
objects of the base category, hence sets in our consideration. An arrow X — > 1" in KI{T) is 
the same thing as an arrow X — > TY in the base category, here Sets. 

X >Y mia{T) 

X >TY in Sets 

Identities and composition of arrows are defined using the unit and the multiplication of T. 
Moreover, there is a canonical adjunction 

J 

Sets /Cf(T) (2.2) 

K 

such that J carries X -^-^ Y in Sets to X Y in K1{T). See [3,42] for details. 

The relevance in this paper is that a Kleisli category can be thought of as a category 
where the branching is implicit. For example, an arrow X ^ Y m. the Kleisli category 
K£{V) is a function X VY hence a "non-deterministic function." When T = T>, then 
by writing X — > y in the Kleisli category we mean a function with probabilistic branching. 
Moreover, composition of arrows in K£{T) is given by 

X ^Y ^ Z in KI{T) = X ^TY ^ T'^Z TZ in Sets; 
that is, making one transition (by g) after another (by /), and then flattening (by /^z)- For 
example, this general definition instantiates as follows when T = T>. For X ^ Y ^ Z , 

{9of){x){z) = Zy^yf{x){y).g{y){z) . 

Remark 2.1. Our use of the sufe-distribution monad instead of the distribution monad 

V=i{X) = {d: X ^[0,1]\Y^ d{x) = 1} 

needs some justification. Looking at the trace distribution ()1.4p . one sees that the probabil- 
ities add up only to 2/3 and not to 1; this is because the infinite trace (namely a"^ i— > 1/3) 
are not present. Therefore in this example, although the state-based system can be modeled 
as a coalgebra in the category KI{'D=i), its trace semantics can only be expressed as an 
arrow in KI(V). 

When a system is modeled as a coalgebra in KI{'D), a state may have a (sub)distribution 
over possible transitions which adds up to less than 1. In that case the missing probability 
can be understood as the probability for deadlock. 

Technically, we use the monad V instead of P=i because we need the minimum element 
(a bottom) so that the Kleisli category becomes Cppo-enriched (Theorem 13. 3p . A bottom 
is available for D as the zero distribution [x i-^ 0], but not for 'D=i. 

2.2. Lifting functors by distributive laws. In this paper a state-based system is pre- 
sented as a coalgebra X ^ FX in 0(r), where F : KI{T) KI{T) is a hfting of 
F : Sets — > Sets. This lifting F ^ F \s equivalent to a distributive law FT =^ TF. 
The rest of this section elaborates on this point. 
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Various kinds of state-based, branching systems are expressed as a function of the form 
X A TFX with T a monad (for branching type) and F a functor (for transition type). 
The following examples are already hinted at in the introduction. 

• For T = and F = 1 + S X _ , a function X TFX is an LTS with explicit termination. 
For example, consider the following system 

X > P(l + S X X) 

X I > {/, {ai,xi), (a2,X2)} 

where / is the element of 10 Then the state x can make three possible transitions, 
namely: x — > / (successful termination), x ^ xi, and x ^ X2, when written in a 
conventional way. 

• By replacing T = V hy V, but keeping F the same, we obtain a probabilistic system such 
as the one in the middle of (jl.ip . For example, 

X > P(l + S X X) 

' (a,y')^l/3 ' 



x'\ 



{a,z') ^ 1/3 
/ ^ 1/3 



• For T = P and F = (S + _)*, a function X TFX is a CFG with S the terminal 
alphabet (but without finiteness conditions e.g. on the state space). See [16] for more 
details. 

All these systems are modeled by a function X TFX, hence an arrow X ^ FX m 
KI(T). Our question here is: is c a coalgebra in KI{T)7 In other words: is the functor F 
on Sets also a functor on KI{T)7 

Hence, to develop a generic theory of traces in K1{T), we need to lift -F to a functor F 
on K1{T). A functor F is said to be a lifting of F if the following diagram commutes. Here 
J is the left adjoint in (12. 2p . 

KI{T) > ia{T) (2.3) 

Sets = > Sets 

The following fact is presented in [43]; see also [39,40]. Its proof is straightforward. 

Lemma 2.2. A lifting F of F is in bijective correspondence with a distributive law 
A : FT^TF. A distributive law X is a natural transformation which is compatible with T's 
monad structure, in the following way. 

Fvx Atx t\x 
FX : > FTX FT^X > TFTX > T^ FX 

FTX ^ > TFX n 




''Note that the singleton 1 = {/} here inF = l + Ex_ has a different interpretation from 1 = {±} in 
T = C — 1 + _. The intuition is as follows. On the one hand, when an execution hits successful termination 
/, it yields its history of observations as its trace. On the other hand, when an execution hits deadlock _L 
then it yields no trace no matter what is the history before hitting ±. This distinction will be made formal 
in Example 14.31 
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A distributive law A induces a lifting F as follows. On objects: FX = FX. Given / : 
X in KI(T), we need an arrow Ff : FX ^ FY in KI{T). Recall that / is a function 
X — TY in Sets; one takes Ff to be the arrow which corresponds to the function 

FX FTY ^ TFY in Sets . 

A distributive law specifies how a transition (of type F) "distributes" over a branching 
(of type T). Let us look at an example. For T = V and F = 1 + S x _ (the combination 
for LTSs with explicit termination), we have the following distributive law. 

1 + E X {VX) — > 7^(1 + S X X) 

/I >{/} 

(a, S) I > {{a,x) I X G S] 



For example, 



>y ^ . — that is (a,{x,y,z]) ^ {{a,x),{a,y),{a,z)] 



a 

> Z 



where waving arrows denote branchings. 

Throughout the paper wc need the global assumption that a functor F has a lifting F 
on K1{T), or equivalcntly, that there is a distributive law A : FT =^ TF. Now wc present 
some sufficient conditions for existence of A. In most examples one of these conditions holds. 

First, take T = V, in which case we have KI(V) = Rel, the category of sets and binary 
relations. We can provide the following condition that uses relation liftings, whose definition 
is found [24]. 

Lemma 2.3 (From [24]). Let F: Sets Sets he a functor that preserves weak pullbacks. 
Then there exists a distributive law A : FV VF given by 

Xxiu) = {v e FX \ {v,u) GRelpiGx)} , 

where u G FVX and 'Relpi^x) ^ FX x FVX is the F-relation lifting of the membership 
relation Gx- D 

In fact, the functor F : Rel Rel induced by this distributive law carries an arrow 
R : X ^ Y in K1{V) — which is a binary relation between X and Y — to its F-relation 
lifting RelpiR). That is, _ 

FR = Ile\F{R) -.FX — > FY (2.4) 

in KiiV) = Rel. 

Now let us consider a monad T which is not V. When a monad T is commutative and a 
functor F is shapely, we can provide a canonical distributive law. The class of such monads 
and functors is wide and all the examples in this paper are contained. 
• A commutative monad [33] is intuitively a monad whose corresponding algebraic theory 

has only commutative operators. We exploit the fact that a commutative monad is 

equipped with an arrow called double strength 

dstx,Y -.TX xTY — > T{X x Y) 

for any sets X and Y; the double strength must be compatible with the monad structure 
of T in an obvious way. 
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Our three examples of monads are all commutative, with the following double strengths. 
C ,A _ f {u,v) ifueX and veY, 

dst5y(ii, u) = uxv , ^ ' ^ 

dst5y(u,t;) = X{x,y). u{x) ■ v{y) . 

• The family of shapely functors [270 on Sets is defined inductively by the following BNF 
notation: 

F ::= id I S I Fi X F2 I U^eIP^ > 
where S denotes the constant functor into an arbitrary set S. Notice that taking infinite 
product is not allowed, nor exponentiation to the power of an infinite set. This is in order 
to ensure that we find an initial F-algebra as a suitable w-colimit — see Proposition IA.1[ 

Lemma 2.4. LetT: Sets — > Sets be a commutative monad, andF: Sets — > Sets a shapely 
functor. Then there is a distributive law A: FT =^ TF. 

Proof. The construction of a distributive law is done inductively on the construction of 
shapely F. 

• If F is the identity functor, then the A is the identity natural transformation T ^ T. 

• If F is a constant functor, say X i— > S, then A is the unit r/s : S — > TS at S G Sets. 

• If F = Fi X F2 we use induction in the form of distributive laws A^' : FiT ^ TFi for 
i E {1,2} to form the composite: 

FiTX X F2TX >TFiX X TF2X — — >T{FiX x F2X) . 

• If F is a coproduct Fi then we use laws A^» : FiT => TFi for i G / in: 

U,,., F.iTX) ) r(U.,, F^) . 

It is straightforward to check that such A is natural and compatible with the monad struc- 
ture. □ 

We have provided some sufficient conditions for a distributive law to exist, that is, 
for a functor F to be lifted to KI{T). This does not mean the results in the sequel hold 
exclusively for commutative monads and shapely functors. 



2.3. Order-enriched structures of Kleisli categories. The notion of branching nat- 
urally involves a partial order: one branching is bigger than another if the former offers 
"more possibilities" than the latter. Formally, this order appears as the Cppo-enriched 
structure of a Kleisli category. It plays an important role in the initial algebra-final coalge- 
bra coincidence in Section 13. li 

A Cppo-enriched category C is a category where: 

• Each homset C{X,Y) carries a partial order Q as in 



9 




Shapely functors here are called polynomial functors by some authors, although other authors allow 
infinite powers or the powerset construction. 
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which makes C{X, Y) an a;-cpo with a bottom. This means: 

- for an increasing w-chain of arrows from X to Y, 

/o E /i E . . . : X^Y , 

there exists its join |Jn<a; fn ■ X ^Y; 

- for any X and Y there exists a bottom arrow -Lx,Y : X ^ Y which is the minimum in 
C{X,Y). 

• Moreover, composition of arrows is continuous as a function C{X, Y)xC{Y, Z) C{X, Z). 
This means that the following joins are preserved^ 

ff°(Un«^/n) = Un<j9°fn) and {Un<.: fn) ° h = \Jn<Mn ° h) . 

Note that composition need not preserve bottoms (i.e. it is not necessarily strict). 
This is in fact an instance of a more general notion of N -enriched categories where V is the 
category Cppo of pointed (i.e. with _L) cpo's and continuous (but not necessarily strict) 
functions. See [7,28,38] for more details on enriched category theory, and [1] on cpo's and 
domain theory. 

Lemma 2.5. For our three examples C, V and T> of a monad T, the Kleisli category K£{T) 
is Cppo-enriched. Moreover, composition of arrows is left-strict: _L o / = _L. 

The left-strictness of composition will be necessary later. 

Proof. Notice first that a set TY for T £ {£, V, T)} carries a cpo structure with _L. The set 
CY = {_L} + Y carries the flat order with a bottom: 




embodying the idea that _L denotes non-termination or deadlock — in contrast to / for 
successful termination. The set VY carries an inclusion order; in T>Y we define d C e if 
d{y) < e{y) for each y ^Y . The bottom element in T>Y is the zero distribution [y i— > 0]: 
this belongs to the set T>Y because V is the stt6-distribution monad. 

The cpo structure of a homset K£{T){X,Y) comes from that of TY in a pointwise 
manner: 

g 

X r:;;;;;]Or;:r:^y if and only if Vx e X. f{x) C^y g{x) . 

f 

It is laborious but straightforward to show that composition in KI{T) is continuous and 
left-strict. □ 

^This component-wise preservation of joins is equivalent to the continuity of the composition function. 
See [1, Lemma 3.2.6]. 
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We are concerned with coalgebras X FX in the category KI{T), which we assume is 
Cppo-enriched. Hence it comes natural to require that functor F is somehow compatible 
with the Cppo-enriched structure of K£{T). The obvious choice is to require that F is 
a Cppo-enriched functor (see e.g. [7]), i.e. F is locally continuous. It means that for an 
increasing w-chain fn : X , we have 

n U = U (^/«) • 

n<u) n<u) 

This is indeed the assumption chosen in axiomatic domain theory. We will come back to 
this point later in Section 13.31 However, for our later purpose, we only need the weaker 
condition of local monotonicity: f Q g implies Ff C Fg. 

For a monad T = {CjVj'D} and a shapely functor F (recall Lemma l2.4p . the lifted F 
is indeed locally continuous. We emphasize again that this does not mean our results in 
Section [3] hold exclusively for shapely functors. 

Lemma 2.6. Let F be a shapely functor and T £ {C, V, T)}. The lifting F : K1{T) K£{T) 
induced by Lemma \2.4\ is locally continuous. 

Proof. By induction on the construction of shapely functors. 

• F = id, the identity functor. Then F = id which satisfies the condition. 

• F = S, a constant functor. Then F maps every arrow to the identity map on E in KliT). 
This is obviously locally continuous. 

• F = Fi X F2. First notice that, for / : X ^ y in KliT), we obtain Ff as the following 
composite in Sets. 

FiX X F2X > TFiY X TF2Y 

T{FiY X F2Y) 

Because the order in K£{T){FX,FY) is pointwise, it suffices to show the following: dst : 
TX X TY T{X X y) is a continuous map between cpo's. It is easy to check that this 
is indeed the case. See (12. 5j) . 

F = W^j^jFj. For / : X — > y in KI{T), we obtain the map Ff as the composite 
[TKj]j^j o Yij^j K£{Fj){f) in Sets. Since the order on the homset is pointwise, it suffices 
to show that each Tk^ : TFjY T([J-^j FjY) is continuous. This is easy. □ 



3. Final coalgebra in a Kleisli category 

In this section we shall prove our main technical result: the initial F-algebra in Sets 
yields the final F-coalgebra in K£{T). It happens in the following two steps: first, the 
initial algebra in Sets is lifted to the initial algebra in KI(T); second we have the initial 
algebra-final coalgebra coincidence in K£{T). For the latter we use the classical result [51] 
of limit-colimit coincidence. This is where the Cppo-enriched structure of KI{T) plays a 
role. 

In the proof we use two standard constructions: initial/final sequences [2] and limit- 
colimit coincidence [51]. The reader who is not familiar with these constructions is invited 
to look at Appendices lA.ll and IA.2I where we briefly recall them. 
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Remark 3.1. The proof of our main theorem (Theorem l3.3l) can be simphfied if we suitably 
strengthen the assumptions. First, if we assume local continuity of the lifted functor F 
(instead of local monotonicity that is assumed in our main theorem), then the initial algebra- 
final coalgebra coincidence follows from a standard result in axiomatic domain theory; see 
Section [3. 3[ Furthermore, for the special case T = V in which case KI{'P) = Rel, the initial 
algebra- final coalgebra coincidence is almost obvious due to the duality Rel = Rel°P; see 
Section 13. 2[ 

3.1. The initial algebra in Sets is the final coalgebra in K2{T). First, it is standard 
that an initial algebra in Sets is lifted to an initial algebra in K£{T). Such a phenomenon is 
studied for instance in [11,44] in the context of combining datatypes (modeled by an initial 
algebra) and effectful computations (modeled by a Kleisli category). For this result we do 
not need an order structure. 

Proposition 3.2. Let T he a monad and F he a endofunctor, both on a category C. Assume 
that we have a distributive law FT =^ TF — or equivalently, we have a lifting F on K£{T). 
If F has an initial algebra a : FA ^ A in C, then 

Ja = r]Aoa : FA — > A in KI{T) 

is an initial F-algebra. Here J is the canonical Kleisli left adjoint as in 1^2. 

We will use an instance of this result for C = Sets. 

Proof. It follows from [20, Theorem 2.14] that a distributive law lifts the canonical Kleisli 
adjunction to an adjunction between the categories Alg(F) and Alg(F) of algebras. 

J' _ 
Alg(F) ^ZZZ^ZZt Alg(F) 

J 1 
C ^ ZZt KliT) 

K 

The left adjoint J' preserves the initial object (see e.g. [42]). □ 

Second, we use the initial algebra-final coalgebra coincidence in ICi{T) — which holds in 
a suitable order-enriched setting — to identify the final coalgebra in /C£(T). This is our main 
theorem. 

Theorem 3.3 (Main theorem). Assume the following: 

(1) A monad T on Sets is such that its Kleisli category K£{T) is Cppo-enriched and 
composition in K2{T) is left-strict. 

(2) For an endofunctor F on Sets, we have a distributive law A : FT ^ TF. Equivalently, 
F has a lifting F on K£{T). Moreover, the lifting F is locally monotone. 

(3) The functor F preserves uj-colimits in Sets, hence has an initial algebra via the initial 
sequence (see Proposition \A.l\) . 

Then the initial F-algebra a : FA ^ A yields a final F-coalgebra in K£{T) by 
(Ja)-^ = J{a~^) = 7]FA oa-^ : A — >FA in ia{T) . 
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We first present the main line of the proof. Some details are provided in the form of 
subsequent lemmas. Note that the assumptions are satisfied by T G {£, V, V} and shapely 
F; see Lemmas 12.51 and \27< 



Proof. By the assumption ([3]) we obtain the initial algebra via the initial sequence in Sets. 
In Sets ^Q„ — — — 3::==^ A (colimit) 




(3.1) 



FA (colimit) 



Here = G Sets is initial and j : — > X is the unique arrow from to an arbitrary X. 
We apply the functor J : Sets — s- K£{T) to the whole diagram. Since J is a left adjoint it 
preserves colimits: hence the two cocones in the following diagram are both colimits again. 



In ia{T) 




(colimit) 



(3.2) 



FA (colimit) 



The w-chain in this diagram is in fact the initial sequence for the functor F (Lemma [37 
because, for example, a left adjoint J preserves initial objects. Moreover the lower cone is 
the image of the upper cone under F; see the diagram ()2.3p . Hence the diagram (|3.2p is 
equal to the following one. Recall that FX = FX on objects. 



In o(r) 



-^F 




(colimit) 



(3.3) 



FJan-i 



Pj\^ (colimit) 



Thus Proposition lA.ll yields that Ja : FA ^ ^ is an initial F-algebra. This can be seen as 
a more concrete proof of Proposition 13.21 

Now we show the initial algebra-final coalgebra coincidence in K£{T). This is done by 
reversing all the arrows in (j3.3p and transforming the diagram into the one of the final 
sequence and its limits. 

We notice (Lemma 13. 6p that each arrow F \ in the initial sequence is an embedding 
(Definition IA.4P . Hence the limit-colimit coincidence Theorem IA.8I says that every arrow 
in the diagram is an embedding. Note that J a and Ja~^, inverse to each other, form an 
embedding-projection pair. 

By taking the corresponding projections — they are uniquely determined (Lemma lA.Sp 
and are denoted by (_)^ — we obtain the next diagram. The limit-colimit coincidence 



Theorem IA.8I says that the two resulting cones are both limits. It is also obvious that the 
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whole diagram commutes. 




The ci;°P-chain here is indeed a final sequence: Lemma 13.51 shows — using the assumption 
([1]) on left-strictness — that is also final in KI(T), and according to Lemma 13.61 we have 
{F i)^ = F ! where ! : X — > is the unique arrow to the final object in K£{T). As to 

the lower cone we have [FJun] = F[{Jan)^) by Lemma [3771 

Hence the diagram (13. 4p is equal to the following one, showing the final sequence for 
F, its limit (the upper one) and that limit mapped by F (the lower one) which is again a 
limit. 




By Proposition IA.2I we conclude that Ja ^ is a final F-coalgebra. □ 

In the remainder of this section the lemmas used in the above proof are presented. We 
rely on the same assumptions as in Theorem 13.31 

Lemma 3.4. The uj-chain in the diagram ^3. is indeed the initial sequence for F . That 
is, we have for each n < lo, 

J pn(^. Sets ^ ^pn(^.laiT)^^ ; JF"0 ^ JF^+^O tnja{T), 

where j ^''^^ : — > FO in Sets and j ^C^) : FO in K£{T) denote the unique maps. 

Proof. By induction on n. For n = the two maps are equal due to the initiality of JO = 
in KI(T). For the step case we use the commutativity JF = FJ of (|2.3p . □ 

Lemma 3.5. The empty set is both an initial and a final object in KI[T). 

In particular, this implies that the object TO is final in Sets. 

Proof. The functor J : Sets — > K£{T) preserves initial objects since it is a left adjoint. 
Therefore = JO is initial in K£{T). Finality follows essentially from the left-strictness 
assumption: for each set X there exists at least one arrow X — > in KI{T), for example 
_Lx,o- To show the uniqueness of such an arrow, take an arbitrary arrow / : X — > in 
K£{T). Recalling that the bottom map _Lo,o : ^ is also the identity arrow in KI{T) 
because of initiality, we obtain 

(*) 

/ = id o / = _Lo,o o / = -Lx,o , 

where the compositions are taken in KI{T) and the equality marked by (*) holds by left- 
strictness of composition. □ 
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Lemma 3.6. Each arrow F ; in the initial sequence for F, as in the diagram I13.3\) . is an 
embedding. Its corresponding projection is given by 

F" ! 

(F"i)^ = F"! in F"o'^;;;~^F"+io . 

Proof. We show that (F^ j , ! ) is an embedding-projection pair for all n < uj. We have 
F \ o F j = id because ! o j = id. For the other half we have 

oF"! =F"(i o !) 

= F"(±o,fo o ! ) initiality of in KI{T) 

= F^ {±fo^pq) composition is left-strict 

C F"(id) = id F is locally monotone. □ 

Lemma 3.7. We have [FJun)^ = F{^{Jan)^) . Hence the lower cone in the diagram 
is the image of the upper cone under F. 

Proof. It is easy to check that (FJa„, F[{Jan)^) ) indeed form an embedding-projection 
pair. Therein we use the monotonicity of F's action on arrows. □ 



3.2. Simpler proof in KI{V) = ReL When T = V we have the self-duality 

Op : /C£(7')°P ^ ia{v) . 
This is because of the following bijective correspondence between functions 

X — ^—^VY in Sets 



Y — >VX in Sets 

given by /"^(y) = {x ^ X \ y e f{x)}. Recalling KI{V) = Rel, this mapping f ^ 
corresponds to taking the opposite relation. 

Due to this "global" duality KI{V) ^ /C£(P)°p, the proof of Theorem ESI is drastically 
simplified for T = V. It essentially relies on the lifted self duality Alg(F) = Alg(F"''), 
where the latter is isomorphic to (Coalg(F))°P. We do not need here an order structure of 
K£{V) nor local monotonicity of F. 

Theorem 3.8. Let F : Sets — > Sets be a functor which preserves weak pullbacks, and 
F : K£{V) K£{V) be its lifting induced by relation lifting (Lemma \2.3\) . Then the initial 
F -algebra in Sets yields the final F-coalgebra in K£{V). 

Proof. We have the following situation because of the self-duality of KiiV). 

Sets ^Hzizili ^(^) ^ 0(P)°P 
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The adjunction J -\ K and the isomorphism Op : KI{V)°^ — > K£{V) hft to those between 
the categories of algebras. 



(Op') 



Mop 



Alg(F) Zl I ZZ Alg(F) — > Alg(F^^) > (Coalg(F))°P 

Sets ^ I ZZt K£{V) 1 > UiVyP 

K 

Indeed, J -\ K hfts due to Proposition l3.2t the hfted isomorphism Op' : Alg(F) =^ Alg(F°^) 
is because of the following commutativity: 

jaiV)°P — > KI{V) 

If (3.6) 
/C£(P)°P — — > KliV) 

which is because: FR = Yie\p{R) (see ()2.4p ); and taking relation liftings is compatible with 
opposite relations (i.e. Reli;'(i?°P) = (Reli7'i?)°P, see [22]). Moreover the category Alg(F°^) 
is obviously isomorphic to (Coalg(i<'))°P. 

Therefore the initial object in Alg(F) is carried to that in (Coalg(F))°P, hence the 
final object in Coalg(F). □ 

For monads such as T = P a "global" self-duality K£{T) = }CI!.{T)°^ is not available. 
Instead, in the proof of Theorem 13. 3[ we exploit the "partial" duality which holds between 
the colimit /limit of the initial/final sequence. 



3.3. Related work: axiomatic domain theory. The initial algebra-final coalgebra co- 
incidence is heavily exploited in the field of axiomatic domain theory, e.g. in [9,12,13,50]. 
There, categories which have coinciding initial algebra and final coalgebra for each endo- 
functor are called algebraically compact categories. They draw special attention as suitable 
"categories of domains" for denotational semantics of datatype construction. The relevance 
comes as follows. 

Let C be a "category of domains." We think of an object of the category C as a type. 
A "recursive" datatype constructor — a prototypical example is {X, Y) i— > — is presented 
as a bifunctor G : C°p x C — > C. Note the presence of both covariance and contravariance. 
We expect that such a category C has a canonical fixed point Fix G such that 

G(FixG,FixG) ^ FixG , 

which models the recursive type determined by the datatype constructor G. Freyd [12] 
showed that if C is algebraically compact, then we can construct such a fixed point as a 
suitable initial algebra; moreover this fixed point is shown by Fiore [9] to be a canonical 
one in a suitable sense. The rough idea here is that the covariant part of G is taken care of 
by an initial algebra; the contravariant part is by a final coalgebra; the initial algebra-final 
coalgebra coincidence yields a fixed point of overall G. 

Typical examples of algebraically compact categories are enriched over Cppo or one of 
its variants. This conforms the traditional use of the word "domain" for certain cpo's (e.g. 
in [1]). 
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Although we utilize the initial algebra-final coalgebra coincidence result in KI{T), we are 
not so much interested in algebraic compactness of K£{T). This is because our motivation is 
difi'erent from that of axiomatic domain theory. In studying trace semantics for coalgebras, 
we need not deal with every endofunctor on KI(T), but only such an endofunctor F which 
is a lifting of F : Sets —>■ Sets. 

In a different context of functional programming, the work [44] also studies initial 
algebras and final coalgebras in a Kleisli category. The motivation there is to combine data 
types and effects. More specifically, an initial algebra and a final coalgebra support the 
fold and the unfold operators, respectively, used in recursive programs over datatypes. A 
computational effect is presented as a monad, and its Kleisli category is the category of 
effectful computations. 

The difference between [44] and the current work is as follows. In [44], the original 
category of pure functions is already algebraically compact; the paper studies the condi- 
tions for the algebraic compactness to be carried over to Kleisli categories. In contrast, in 
the current work, it is a monad — with a suitable order structure, embodying the essence 
of "branching" — which yields the initial algebra-final coalgebra coincidence on a Kleisli 
category; the coincidence is not present in the original category Sets. 

3.3.1. Local continuity vs. local monotonicity. In axiomatic domain theory, Cppo-enriched 
categories are said to be algebraically compact because, "in a 2-category setting" [13], every 
endofunctor has an initial algebra and a final coalgebra. Concretely this means: "every 
locally continuous functor." 

In this spirit, we could have made a stronger assumption of -F's local continuity in 
Theorem 13.31 instead of local monotonicity. If we do so, in fact, the proof of Theorem 13.31 
becomes much simpler: the following proposition (Lemma in [13, p. 98]) immediately yields 
the initial algebra-final coalgebra coincidence for a locally continuous F. 

Proposition 3.9 ( [13]). Let H he a Cppo-enriched category whose composition is left- 
strict, and G : D ^ B be a locally continuous endofunctor. An initial algebra (3 : GB ^ B, 
if it exists, yields a final coalgebra [3^^ : B ^ GB. 

Proof. Given a coalgebra d -.Y ^ GY, the function 

$ : B(y, B) — > B(y, B) , / I — >poGf od 

is continuous due to the local continuity of G. Hence it has the least fixed point |Jn<u; ^"(^); 
this proves existence of a morphism from d to 



GY 



^GB 



4 



Y 



^B 



Now we shall show its uniqueness. Assume that g -.Y ^ B is a morphism of coalgebras 
as above, that is, ^{g) = g. Similarly to <I>, we define a function ^ : I}{B, B) 0{B, B) as 
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the one which carries h : B ^ B to (3 o Gh of) . We have 

^>"(_L) = U„ ^"(^ B ^Y) composition is left-strict, so L o g = 1_ 

= Un(^"(-L) o ^"(f)) ^"(-L °g) = ^"(-L) o ^'"(5), by induction 

= (|Jn^"(-'-)) ° (Un*^"(5)) composition is continuous 

= Un^"(5) Un^"a)=id, (*) 

= (7 $((7) = gf by assumption. 

Here (*) holds because Lln^"(-'-)' being a fixed point for is the unique morphism of 
algebras from (3 to [3. This shows that the morphism g must be the least fixed point of □ 

For our main Theorem 13.31 we can do with only local monotonicity of the lifted functor 
by taking a closer look at the initial/final sequences. However at this stage it is not clear 
how much we gain from this generality: up to now we have not found an example where 
the functor F is only locally monotone (and not locally continuous). 

4. Finite trace semantics via coinduction 

In this section we shall further illustrate the observation that the principle of coinduc- 
tion, when employed in KI(T), captures trace semantics of state-based systems. As we have 
shown in the previous section, an initial algebra in Sets constitutes the semantic domain, 
i.e. is a final coalgebra in K£{T). Viewing an initial algebra as the set of well-founded terms 
(such as finite words or finite-depth parse trees), this fact means that the "trace semantics" 
induced by coinduction is inevitably finite, in the sense that it captures only finite behavior. 
Here we will elaborate on this finiteness issue as well. 

4.1. Trace semantics by coinduction. As we have seen in Section [2.21 various types of 
state-based systems allow their presentation as coalgebras X FX in a Kleisli category 
K£{T). For example, 

• LTSs with explicit termination, with T = V and F = 1 + S x _ ; 

• probabilistic LTSs (also called generative probabilistic transition systems in [52,58]) with 
explicit termination, with T = D and F = 1 + S x _ ; 

• context-free grammars with T = V and F = (S + _)*. 

The main observation underlying this work is the following. If we instantiate the parameters 

T for branching type and F for transition type 
in the coinduction diagram 

FX FA 

4 in /C^(T) (4.1) 



with one of the above choices, then the commutativity of the diagram is equivalent to the 
corresponding (conventional) definition of trace semantics in Section [TTl Therefore we claim 
that the diagram (j4.ip is the mathematical principle underlying various "trace semantics," 
no matter if it is "trace set" (non-deterministic) or "trace distribution" (probabilistic). 
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Corollary 4.1 (Trace semantics for coalgebras). Assume that T and F are such as in 
Theorem ] 3. 3[ and a : FA =^ A is an initial F -algebra in Sets. Given a coalgebra c : X ^ 
TFX in Sets, we can assign a function 

trr : X — > TA in Sets 



which is, as an arrow X ^ A in K£{T), the unique one making the diagram J^. j[ j commute. 
We shall call this function trc the (finite) trace semantics for the coalgebra c. □ 

Example 4.2. As further illustration we give details for the choice of parameters T = V 
and F = 1 + S X _ . This is the suitable choice to deal with the first system in . 

Now the coinduction diagram looks as follows. Recall that an initial F-algebra is carried 
by the set S* of finite words. 

l+Sxtrc 

1 + SxX + 

4 -f-J([nil,cons])-l in KI{V) (4.2) 

X ^s* 

trc 

It assigns, to a system c, a function tr^ : X ^ V(Ti*) which carries a state x G X to the 
set of finite words on S which can possibly arise as an execution "trace" of c starting from 
X. The commutativity states equality of two arrows X ^ 1 + S x S* in KI{'P), that is, 
functions X ^ 7^(1 + T, x S*). Let us denote these functions by 

u = (1 + S X trc) o c (up, then right), v = J([nil, cons])^"'^ o tr^ (right, then up). 

For each x (z X, the following conditions — derived straightforwardly by definition of com- 
position of Ki{V), lifting of the functor 1 + S x _, etc. — specify u and w's value at x, as a 
subset of 1 + E x E*. 

/ G u{x) <^=^ / G c(x) 

(o, cj)Gii(x) <=^ 3x' G X. ((a,x') G c(x) A G trc(x')) 

/ G v{x) <^ G trc(x) 

(a, (j)Gf(x) <^=^ a • cj G trc(x) 

Commutativity of (j4.2p amounts to u = v; this gives the condition ()1.3p . 

From a different point of view we can also express that as follows: finality of the 
coalgebra S* ^ 1 + S x S* in (j4.2p ensures that the conventional recursive definition (jl.3p 
uniquely determines a function trc : X — > P(S*). Hence trc is well-defined. 

An easy consequence of the recursive definition (jl.3p is 

oi . . . a„ G trc(x) <^=^ 3xi, . . . , x„ G X. x — V ■ ■ ■ ^ x„ — > / . 

Therefore every trace ai . . . a„ G trc(x) has termination / implicit at its tail. In particular, 
the set trc(x) is not necessarily prefix-closed: oi . . . a„a„+i . . . a„+m G trc(x) does not imply 
ai . . . a„ G trc(x). 

Example 4.3. Let us take T = C (the lift monad) and F = l + Ex_. In this case a 
coalgebra X -h- C{1 -|- S x X) in Sets is a system which can 

• get into a deadlock (c(x) = _L where C = {_L} +_), 

• successfully terminate (c(x) = / where F = + S x_), or 

• output a letter from S and move to the next state (c(x) = (a,x')). 
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By examining trace semantics for such systems, we shall formally put the difference between 
the computational meanings of the two elements, _L and /. 

The coinduction diagram (j4.ip instantiates to the same diagram as (|4.2p , but now in the 
category K£{C). Easy calculation shows that its commutativity amounts to the following 
condition. The function 

X = {±} + S* in Sets 

satisfies, for each x G X, 

trc(x) = c{x) = / , 

trc{x) = a-a <^ 3x' e X. [c{x) = {a,x') h trdx') = a) , (4.3) 
trc(x) = _L -<=^ c(x) = ± or Bx' G X. ( c(a;) = (a, x') A trc(x') = -L ) . 

Here cr G S* is a word in S. 

For the systems under consideration, we can think of three different kinds of possible 
executions. 

• An execution eventually hitting /, that /. By the condition (fi3]) it 
yields a word trc(x) = ai . . . a„ as its trace. 

• An execution eventually hitting _L, that is, x — ^ • • • ^ x„ ^ ±. By the third line of 
(14. 3p we see that trc(x„) = _L; moreover trc(xn_i) = • • • = trc(x) = _L. It properly reflects 
our intuition that a state x that eventually goes into deadlock does not yield a flnite (or 
terminating) trace. 

• An execution not hitting / nor ±, that is, x — V xi • • • . In this case, the only possible 
solution of the "recursive equation" (j4.3p is trc(x) = trc(xi) = • • • = _L. The intuition 
here is: a state leading to livelock does not yield a flnite trace. 

4.2. Infinite traces. The trace semantics obtained via coinduction (Corollarv l4.ip assigns, 
to each state x G X, "a set of" (if T = V) or "a distribution over" (if T = D) elements of 
the initial algebra A. Elements of A are thought of as possible linear behavior of the system 
determined by the transition type (i.e. the functor F). 

Now the intuition is that an initial F-algebra A consists of the well-founded (or finite- 
depth) terms and a final i^'-coalgebra Z consists of the possibly non-well-founded (or infinite- 
depth) terms. For example, 

• forF = l + Sx_,y4 = S* consists of ah the finite words, and Z = = S* + S'^ is 
augmented with streams, i.e. infinite words; 

• for F = (5^ +_)*, A is the set of finite-depth skeletal parse trees (see [16]), and Z 
additionally contains infinite-depth ones; 

• for F = T, X _ which models LTSs without explicit termination, ^ = and Z = S"^. 

Therefore our trace semantics X — > TA only takes account of finite, well-founded linear- 
time behavior but not infinite ones. This is why the trace set (jl.2p does not contain ab^; 
and also why we have been talking about LTSs with explicit termination — otherwise the 
finite trace semantics is always empty. 

Designing a coalgebraic framework to capture possibly infinite trace semantics is the 
main aim of [24]. The work is done exclusively in a non-deterministic setting and the main 
result reads as follows. 
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Theorem 4.4 (Possibly infinite trace semantics for coalgebras, [24]). Let F be a shapely 
functor on Sets, and C, : Z =^ FZ he a final coalgebra in Sets. The coalgebra 

JC : Z — >FZ mia{V) 

is weakly final: that is, given a coalgebra c : X ^ FX, there is a morphism from c to JC, 
but the morphism is not necessarily unique. 

>FZ 

-|JC in KI{V) (4.4) 

Still there is a canonical choice tr^ among such morphisms, namely the one which is 
maximal with respect to the inclusion order. We shall call the function tr^ : X VZ the 
possibly-infinite trace semantics for c. □ 

Note liere that, when we take F = 1 + E x _ and T = V (the choice for LTSs with 
termination), commutativity of (j4.4p boils down to exactly the same conditions as ()1.3p : 

{)etrf{x) <^ x^/, a-aetr'^{x) 3y. ( x A y A ct G tr^f (y) ). 

(4.5) 

Weak finality of ^ 1 + S x S°° (corresponding to Z ^ FZ in (j4.4p ) means the following. 
The recursive definition (j4.5p — although it looks valid at the first sight — does not uniquely 
determine the infinite trace map trjf : X V{T,°°). Instead, the map tr^ is the maximal 
one among those which satisfy (14. Sp . 

As an example take the first system in (II. ip . We expect its possibly- infinite trace map 
X V{TP^) to be such that x ^ ab* + ab"^ and y ^ b* + 6'^. Indeed this satisfies (jl3|) and 
is moreover the maximal. However, the function x ah* and y i— > b* — this is actually the 
finite trace X V{T,*) embedded along S* ^ — also satisfies (|4.5p . In fact, [16, Section 
5] shows a general fact that such an embedding of the finite trace map is the minimal one 
among those morphisms which make the diagram ()4.4p commute. 

The coalgebraic characterization (Theorem 14. 4p of possibly-infinite trace semantics is 
not yet fully developed. In particular the current proof of Theorem 14.41 (in [24]) is fairly 
concrete and a categorical principle behind it is less clear than the one behind finite traces. 
Consequently the result's applicability is limited: we do not know whether the result holds 
in a probabilistic setting; or whether it holds for any weak-pullback-preserving functor F. 

5. Trace semantics as testing equivalence 

In this section we will observe that, in a non-deterministic setting, the coalgebraic finite 
trace semantics (i.e. coinduction in K£{V)) gives rise to a canonical testing situation in 
which a test is an element of the initial F-algebra A in Sets. Here F specifies the transition 
type, just as before. The notion of testing situations (Definition 15. ip and its variants have 
attracted many authors' attention in the context of coalgebraic modal logic; our aim here is 
to demonstrate genericity and pervasiveness of the notion of testing situations by presenting 
an example which is not much like modal logic (that is, propositional logic plus modality). 

In Section 15.11 we introduce the notion of testing situations and investigate some of 
their general properties. Our main concern there is the comparison between two process 
equivalences, namely testing equivalence and equivalence modulo final coalgebra semantics. 



FX 

4 

X 
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We present the equivalences categorically as suitable kernel pairs; this makes the arguments 
simple and clean. In Section [5.21 we present the canonical testing situation for trace seman- 
tics. Moreover we show that it is expressive: the testing captures final coalgebra semantics, 
which is now trace semantics. 



5.1. Testing situations. Recent studies [5,6,32,35,37,45] on coalgebra and modal logic 
have identified (variants of) the following categorical situation as the essential underlying 
structure. Following [45] , we prefer using a more general term "testing" : it subsumes "modal 
logic" in the following sense. We learn properties of a system through pass or failure of 
tests; modal logic constitutes a special case where tests are modal formulas. 

Definition 5.1. A testing situation is the following situation of a contravariant adjunction 
^op _| p endofunctors F, M 

p 

F°p Qc°P,r^j^]^A^ M (5.1) 

plus a "denotation" natural transformation 5 : MP =^ pp°P — > A, which consists of 
arrows MPX ^ PFX in A. 

Note that the denotation 5 is a parameter: the same "syntax for tests" M : A ^ A can 
have different interpretations with different 5. 

The requirements in Definition 15.11 are the same as in [32,45]. They are what we need 
to compare two process semantics, namely testing equivalence — which arises naturally from 
the concept of testing — and final coalgebra semantics We shall explain each ingredient's 
role, using the well-established terminology of modal logic. 

• The endofunctor i*" : C — > C makes Coalg(i^) the category of "systems," or "Kripke 
models" in modal logic. 

• The category A — typical examples being Bool of Boolean algebras or Heyt of Heyting 
algebras — is that of "propositional logic." The functor M specifies "modality": modal 
operators and axioms. Then Alg(M) is the category of "modal algebras"; the initial 
M-algebra ML ^ L is a "modal logic" consisting of modal formulas, modulo logical 
equivalence. 

• The denotation 6 specifies how the modality M is interpreted via transitions of type 
F. This allows to give "Kripke semantics" for the modal logic: given a coalgebra (or a 
"Kripke model") c : X ^ FX, interpretation LJc of modal formulas therein is given by 
the following induction. 

ML MPX 

PFX (5.2) 



initial 



In fact we can be even more liberal: existence of a denotation S can be replaced by existence of a 
lifting P : Coalg(_F)°'' — » Alg(M) of P. The results in this section nevertheless hold in that case. The 
latter condition (there is a lifting P) is strictly weaker than the former (there is a natural transformation 
S): obviously S induces P but not the other way round. Let C = a;°'',A = cj, P = id, _F = (1 +_)°'' and 
M = 2 + _. Then both Coalg(F) and Alg(M) are the empty category hence P has the trivial lifting. 
However there is no natural transformation MPX — > PF°p X. 
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Why a right adjoint S of P°p? It aUows us, via transposition, to assign a modal "theory" 
to each state of a Kripke model. 

L — >PX in A 

^=^= (5°P H P) (5.3) 



X >SL in 



The theory thc{x) associated with a state x contains precisely the modal formulas that 
hold at X. 

Following the above intuition, we define the categorical notion of testing equivalence — two 
states are testing-equivalent if they have the same modal theory. 

Definition 5.2. Assume that we have a testing situation ()5.ip . and that C has finite limits. 
On a coalgebra X FX, the testing equivalence TestEq^, is the kernel pair of the theory 
map the defined by (j5.2p and ()5.3I) . Equivalently, 



TestEq^ y^^X x X ] SL (5.4) 

thc07r2 



is an equalizer. 



Similarly, we introduce the categorical notion of "equivalence modulo final coalgebra 
semantics"; we shall call it FCS- equivalence for short. 

Definition 5.3. Assume that there is a final F-coalgebra ( : Z =^ FZ, and that C has 
finite limits. On a coalgebra X A FX, the FCS- equivalence FCSEq^ is the kernel pair of 
the unique map behc : X —f Z induced by finality. Equivalently, 

(51,92) beh^OTTi 

FCSEq^ > >X X X \Z (5.5) 

behc07r2 

is an equalizer. 

It is easily seen that the two "relations" TestEq^ and FCSEq^ on X are equivalence 
relations in the sense of [23, Section 1.3]. That is, they satisfy the reflexivity, symmetry, 
and transitivity conditions when the conditions are suitably formulated in categorical terms. 

Now our concern is the comparison between two process semantics TestEq^ and FCSEq^, 
as subobjects of X x X. The following lemma is crucial for our investigation; in fact it is 
important for coalgebraic modal logic in general and appears e.g. as [32, Theorem 3.3]. 

Lemma 5.4. A morphism of F-coalgebras preserves theory maps. That is, 

FX > FY ^ 

ct td implies -^i 

X , — >Y y 
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Jc- Naturality of 5 plays an 



-^MPX 
-^PFX 



Proof. The following induction diagram proves Pf o\_\d 
important role there. 

Ff AlPf 

ML ^ MPY 

initial - PFY ^— 

Then the claim follows from naturality of the transposition (j5.3p . □ 

We show that in a testing situation like (jS.ip . tests respect final coalgebra semantics. 
That is, testing does not distinguish two FCS-equivalent states. 

Proposition 5.5. Consider such a testing situation and equivalence relations as in Defini- 
tions [5^ and \5.3[ For any coalgebra X FX we have an inclusion 

FCSEq^ < TestEq^ 

of subobjects of X x X . 

Proof. It suffices to show that the arrow {qi,q2) in (|5.5p equates the parallel arrows in ([57 
then the claim follows from universality of an equalizer. 

the o vTi o {qi,q2) = the 

' ' o qi 

° q2 



(*) 

due to (15.5 



= th^ o behc 
= th^ o behc 

= the o q2 {*) 
= the o 7r2 o {qi,q2) . 

Here (*) is an instance of Lemma 15.41 behc is a morphism of coalgebras from c to the final 

C- □ 

The converse TestEqe < FCSEqe does not hold in general. For a fixed type of systems 
(i.e. for fixed F : C ^ C), we can think of logics with varying degree of expressive power; 
this results in process equivalences with varying granularity. This view is systematically 
presented by van Glabbeek in [57] as the linear time-branching time spectrum — a categorical 
version of which we consider as an important direction of future work. 

It is when we have FCSEqe ^ TestEqe that a modal logic (considered as a testing 
situation) is said to be expressive. Recall that FCSEqe usually coincides with bisimilarity if 
C is Sets: in this case an expressive logic captures bisimilarity. 

The following proposition states a (rather trivial) equivalent condition for a testing 
situation to be expressive. For more ingenious sufficient conditions — which essentially rely 
on the transpose of 6 being monic — see e.g. [32]. 

Proposition 5.6. Consider a testing situation as in Definitions \5.2\ and \5.3[ The testing 
is expressive, that is, for any coalgebra X A FX we have 

TestEqe ^ FCSEqe 

as subobjects of X x X, if and only if the theory map th^ : Z SL for the final coalgebra 
is a mono. 
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Proof. We first prove the "if" direction. In view of Proposition 15.51 it suffices to sfiow tliat 
{pi,P2) in (|5.4p equalizes behc o vri and behc o 112 (whicli proves TestEq^ < FCSEq^). 

th^ o behc o Pi = the ° Pi by Lemma [57 

= the ° P2 due to ([57 

= th^ o behc o p2 by Lemma [ 

We have behc o pi = behc o p2 since th^ is a mono. 

To prove the "only if" direction, first we observe that the FCS-equivalence on the final 
coalgebra C : Z ^ FZ is the diagonal relation: that is, 

FCSEq^ > y z X Z ] Z 

z 

This is because beh^ = id : Z — > Z. Now assume that th^ o k = th^ o I for k,l : Y ^ Z. 
Universality of an equalizer TestEq^ induces a mediating arrow m in the following diagram. 

{k,l) beh^oTTi 

Z X Z I Z 




TestEq^ > FCSEq^ > z 



The whole diagram commutes since TestEq^ = FCSEq^ (by assumption) and FCSEq^ = Z 
(by the above observation), both as subobjects of Z x Z. This proves k = I. □ 

Remark 5.7. The literature [5,6] considers more restricted settings than the testing situ- 
ations in Definition 15.11 There an adjunction 5"°^ H P is replaced by a dual equivalence of 
categories, and a denotation 5 is required to be a natural isomorphism. These additional 
restrictions allow one to say more about the situations: logics are always expressive; the 
main concern of [6] is how to present an abstract modal logic M : A — > A by concrete syn- 
tax. However, for our purpose in Section [5.21 the greater generality of our notion of testing 
situations is needed. 



5.2. Canonical testing for trace semantics in K£{V). In this section we shall present 
a canonical testing situation for coalgebras in K1{V). We shall also show that the testing is 
"expressive," in the sense that the testing captures final coalgebra semantics. The intuition 
is as follows. 

Trace semantics for non-deterministic systems assigns to each system c its "(finite) trace 
set" map trc : X — > VA, where A carries an initial algebra in Sets. This suggests a natural 
testing framework where: an element t of ^4 is a test; a state x G X of a system passes a 
test t if and only if the trace set of x includes t (i.e. x \= t <^=^ t G trc(x)). An important 
point here is that A, carrying an initial algebra in Sets, usually gives a well-founded syntax 
for testsH 

We focus on a non-deterministic setting (i.e. T = V) va. this section and leave a prob- 
abilistic one as future work. Although the above intuition is true in probabilistic settings 

^Recall the construction of an initial algebra in Sets via the initial sequence (Proposition \h.l\ . The set 
A is the colimit {union in Sets) of the initial sequence — > FO F^O ■ ■ ■ . Each F"0 can be thought of 
as the set of terms with depth < n. 
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as well — where the 2-valued (pass/failure) observation scheme is replaced by the refined 
[0, l]-valued one — we do not know yet how to extend the current material to probabilistic 
settings. The difficulty is that the category K1{T>) is not self-dual, as opposed to KI{V); see 
dS^I) below. 

The canonical testing situation which captures finite trace semantics is the following 

one. 

Op K 



0(P)°P^^_^_JJ/Cf(P)^__^_JJSets (5.6) 

Here J ^ K \s the canonical Kleisli adjunction. Recall the self duality Op : 0(7^)°p =^ 
K£{V) from Section 13.21 The denotation is given by (the components of) the distributive 
law A : FV =^ VF. The following lemma establishes naturality of the denotation. 

Lemma 5.8. Let F : Sets — s- Sets be a functor which preserves weak puUbacks, and F be 

its lifting induced by the relation lifting (Lemma \2.3\) . Then the components FVX ^ VFX 
of the corresponding distributive law A also form a natural transformation 

F o K o Op ^ K o Op oF°^ : 0(P)°p — > Sets . 

Proof. The desired natural transformation is obtained from another natural transformation 

A' : FK =^ KF : KI{V) — > Sets 

which we describe in a moment, by post-composing the functor Op. That is, the desired 
one is the composite 

FKOp KFOp KOpT" , 

or equivalently, in a 2-categorical presentation, 

/C£(P)°p > ia{V) > Sets 

KliVf^ ^ ^/C£(P) >Sets . 

Op K 



Here the equality (*) is the one in (j3.6p . 

Now we describe the natural transformation A'. Its components are given by those of 
A; naturality of A' is an easy consequence of A's being a distributive law. Indeed, given an 
arrow f : X va K1{V), the following shows that the naturality square commutes. 

KFf o Xx = fipY ° 'PF'f ° definition of K 

= fipY ° 'P^Y ° VFf o Ax definition of F 

= fipY ° VXy o X-pY o FVf naturality of A 

= Ay o Ffj^Y o FVf X is compatible with the multiplication fi^ of V 

= Ay o FKf definition of K □ 

The previous lemma establishes that the situation (15. 6p is indeed a testing situation as 
defined in Definition 15. 1[ 

In the previous Section 15. H the use of testing situations is demonstrated through com- 
paring testing equivalence and final coalgebra semantics, both described as suitable kernel 
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pairs. Unfortunately this argument is not valid in the current situation (I5.6p . since the 
category KliV) does not have kernel pairs. 

Still, we shall claim that the situation (j5.6p is "expressive," in the sense that final 
coalgebra semantics is captured by testing. This claim is supported by the following fact: 
in the current situation the two arrows trc and the simply coincide. Therefore their kernel 
relations — in any reasonable formalization — should coincide as well. 

Proposition 5.9. Let X FX he a coalgebra in K£{V). In the testing situation < I5.6]) , 
the following arrows in K£{V) coincide. 

• XTc : X ^ A, giving the final coalgebra (trace) semantics for c. 

• the : X ^ A, giving the testing semantics, i. e. the set of passed tests. 

Therefore the testing is "expressive" : tests from an initial F -algebra captures trace semantics 
(which is via a final F-coalgebra). 

Here A is the carrier of an initial -F-algebra, hence that of a final -F-coalgebra. Note that, 
in the general setting in Section [5. the codomains of trc and the need not coincide. 

Proof. We shall show that the transpose 



of trc under the adjunction in (|5.6p makes the diagram (|5.2p — which defines LJc — commute. 
This proves tr^ = Lie, hence trc = [_lc^ = the. 

First note that the transpose trc : A — > VX is given by the arrow Op(trc) : ^ ^ X in 
K£{V) thought of as an arrow in Sets. In the sequel we shall write Op(trc) for trc . 

Commutativity of the diagram (j4.ip — defining trc — yields the following equality. 




VX 



in Sets 



Op(trc) o Op{Ja-^) = Op{c) o Op(F^^trc) in /C£(P). 
By the definition of composition in KI{V), it reads as follows in Sets. 

/iv o P(Op(trc)) o Op(Ja^i) = fMx o V{Op{c)) o Op(F°''trc) 
We use this equality in showing that Op (trc) makes the diagram (|5.2p commute. 
OpittTc) o a = fix ° Vx ° Op{trc) o a unit law 

= fix ° ^{Opitrc)) o r]A o Oi naturality of t] 



(5.7) 



= fix o r{Op{tr,)) o Op{Ja-^) 
= fixoV{Op{c)) o OpiT^tr,) 
= fixoV{Op{c))oFOp{tr,) 



Op{Ja ) = Ja = rjA o 0( 
by dSZD 

OpF°^ = FOp, dMl) 



= fix o V{Opic)) o Xx o FOp(trc) 
= KOp{c) o Xxo FOp(trc) . 
Recall that M in dO]) is now F; P in dO]) is now KOp 



This concludes the proof. 



definition of F 



□ 
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The proposition establishes a connection between two semantics for F-coalgebras in 
ICi(V), namely: trc via a final F-coalgebra, and the via an initial F-algebra. One may 
well say that it is a "degenerate" case because, as we have shown in Section [3l coinduction 
in KiiV) and induction in Sets are essentially the same principle. Our emphasis is more 
on the fact that the coincidence of induction and coinduction yields a rather uncommon 
example of testing situations. Testing situations are of interest in modal logic — where the 
underlying contravariant adjunction 5°P H P : A — > C°p in (jS.ip is often the Stone duality 
or one of its variants. Our example /C£(P)°p ^ Sets here does not look like one of those 
familiar examples. 

6. Conclusions and future work 

We have developed a mathematical principle underlying "trace semantics" for various 
kinds of branching systems, namely coinduction in a Kleisli category. This general view is 
supported by a technical result that a final coalgebra in a Kleisli category is induced by an 
initial algebra in Sets. 

The possible instantiations of our generic framework include non-deterministic systems 
and probabilistic systems, but do not yet include systems with both non-deterministic and 
probabilistic branching. The importance of having both of these branchings in system veri- 
fication has been claimed by many authors e.g. [48,60], with an intuition that probabilistic 
branching models the choices "made by the system, i.e. on our side," while (coarser) non- 
deterministic choices are "made by the (unknown) environment of the system, i.e. on the 
adversary's side." A typical example of such systems is given by probabilistic automata 
introduced by Segala [48]. 

In fact this combination of non-deterministic and probabilistic branching is a notoriously 
difficult one from a theoretical point of view [8,54,59]: many mathematical tools that are 
useful in a purely non-deterministic or probabilistic setting cease to work in the presence of 
both. For our framework of generic trace semantics, the problem is that we could not find 
a suitable monad T with an order structure. 

We have used the order-enriched structure of a Kleisli category (expressing "more pos- 
sibilities") to obtain the initial algebra- final coalgebra coincidence result. However, an order 
structure is not the only one that can yield such coincidence: other examples include metric, 
quasi-metric and quantale-enriched structures (in increasing generality). See e.g. [10,56] for 
the potential use of such enriched structures in a coalgebraic setting. The relation of the 
current work to such structures is yet to be investigated. 

In the discipline of process algebra, a system is represented by an algebraic term (such as 
a.P II a.Q) and a structural operational semantics (SOS) rule determines its dynamics, that 
is, its coalgebraic structure. This is where "algebra meets coalgebra" and the interaction is 
studied e.g. in [4,30,55]. In our recent work [18] we claim the importance of the microcosm 
principle in this context and provide a "general compositionality theorem" : under suitable 
assumptions, the final coalgebra semantics is compatible with the algebraic structure. The 
results of the current paper say that the final coalgebra semantics can be interpreted as 
finite trace semantics, hence the result in [18] also yields a general compositionality result 
for trace semantics. 

In this paper we have included some material — on possibly-infinite traces and testing 
situations — which, unfortunately, we have worked out only in a non-deterministic setting. 
A fully general account on these topics is left as future work. 
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Finally, there are so many different process semantics for branching systems, between 
two edges of bisimilarity and trace equivalence in the linear time-branching time spec- 
trTim [57] . How to capture them in a coalgebraic setting is, we believe, an important and 
challenging question. 
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Appendix A. Preliminaries 

A.l. Initial/final sequences. Here we recall the standard construction [2] of the initial 
algebra (or the final coalgebra) via the initial (or final) sequence. Notice that the base 
category need not be Sets. 

Let C be a category with initial object 0, and F : C — > C be an endofunctor. The initial 
sequenc^^ of F is a diagram 



— 

where j : ^ X is the unique arrow. 
Now assume that: 

• the initial sequence has an a;-colimiiF^ (F"0 A)n<uj] 

• the functor F preserves that w-colimit. 

Then we have two cocones {an)n<Lj and {Fan-i)n<ui over the initial sequence. Moreover, 
the latter is again a colimit: hence we have mediating isomorphisms between these cones. 




In this paper we consider only initial/final sequences of length ui. 
An w-colimit is a colimit of a diagram whose shape is the ordinal lu. 
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Proposition A.l. The F-algebra a : FA ^ A is initial. 

Proof. For future reference we prove the dual result: see Proposition IA.2[ □ 

Tlie dual of this construction yields a final F-coalgebra. Assume that the base category 
C has a terminal object 1. The final sequence of F is 



-Flf- 



^ — • 



where ! : A — > 1 is the unique arrow. Assume that it has an w°P-limit {Z 
and also that F preserves that Ci;°P-limit. We have the following situation. 



n<Lj ) 



• • • -f- 




Proposition A. 2. The coalgebra C^: Z ^ FZ is final. 



FX induces a cone {X 



/3„ 



n<u) 



over the final 



Proof. Any F-coalgebra c : X 
sequence in the following way. 

/3o = ! : A ^ 1 , f3n+i = FI3nOc . 

Now we can prove the following: for an arrow f : X ^ Z, f is a morphism of coalgebras 
from c to C if and only if / is a mediating arrow from the cone (Pn)n<uj to the limit {Cn)n<ui- 
Hence such a morphism of coalgebras uniquely exists. □ 

It is easy to see that every shapely functor in Sets preserves w-colimits and Li;°P-limits. 
Hence we have the following. 

Lemma A. 3. A shapely functor F has both an initial algebra and a final coalgebra in Sets. 

□ 



A. 2. limit-colimit coincidence. We recall some relevant notions and results from [51]. 
The idea is that in a suitable order-enriched setting, (co)limits are equivalently described as 
an order-theoretic notion of 0-(co)limits. Due to the inherent coincidence between O-limits 
and O-colimits, we also obtain the so-called limit-colimit coincidence. 

limit colimit 
II II 
O-limit — — '■ — ~, O-colimit 

obvious coincidence 

The notions of 0-(co)limits are stated in terms of embedding-projection pairs which 
we can define in an order-enriched category. In the sequel we assume the Cppo-enriched 
structure. 

Definition A. 4 (Embedding-projection pairs). Let C be a Cppo-enriched category. A 
pair of arrows 
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in C is said to be an embedding-projection pair if we have p o e = id and e o p C id. 
Diagrammatically presented, 




By p o e = id we automatically have that e is a mono and p is an epi. Both split. 

Proposition A. 5. Let {e,p),{e' ,p') : X Y be two embedding-projection pairs with the 
same (co)domains. Then e Q e' holds if and only if p' Q p. As a consequence, one 
component of an embedding-projection pair determines the other. □ 

This proposition justifies the notation e^ for the projection corresponding to a given em- 
bedding e, and p^ for the embedding corresponding to a given projection p. It is easy to 
check that 

(e o ff = f^oe^ and {p o qf = q^ o p^ . 

Definition A. 6 (O-(co)limits). Let Xq ^ Xi ^ ■ ■ ■ be an w-chain in a Cppo-enriched C. 

A cocone (X„ ^ C)n<uj over this chain is said to be an O-colimit if: 

• each cj„ is an embedding; 

• the sequence of arrows ( C — —^Xn >-—fC )n<Lo is increasing. Moreover its join taken in 
the cpo C(C, C) is idc. 




Dually, a cone (C i^)n<a; over an a;°P-chain Yq ^ Yi ^ ■ ■ ■ is an O-limit if: each 
7„ is a projection, and the sequence (7^ o 7„ : C ^ C)n<uj is increasing and its join is idc. 

The following proposition establishes the equivalence between (co) limits and O-(co) li- 
mits. For its full proof the reader is referred to [51]. 

Proposition A. 7 (Propositions A, B, C, D in [51]). Let Xq ^ Xi ^ ■■■ be an uj-chain 
where each e„ is an embedding. 

(1) Let {Xn C)n<u) be the colimit over the chain. Then each (t„ is also an embedding. 
Moreover, {a„)n<uj is cm O-colimit. 

(2) Conversely, an O-colimit (X„ ^ C)n<w over the chain is a colimit. 
Dually, let Xq ^ Xi ■ ■ ■ be an uj^^-chain where each Pn is a projection. 

(3) Let {D ^ Xn)n<ijj be a limit over the chain. Then each Tn is also a projection. 
Moreover {Tn)n<uj is an O-limit. 

(4) Conversely, an O-limit {D ^ Xn)n<uj over the chain is a limit. 

Proof. For later reference we present the proof of (jH). Let {B ^ Xn)n<Lj be an arbitrary 
cone over the chain Xq ^ Xi <^ ■ ■ ■ . First we prove the uniqueness of a mediating map 
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f:B^D. 

/ = idz) o / = (|J„<a;(T^ o Tn)) o / (r„)„<^ is an O-limit 

— \-\n<Lj('^n ° Tn ° f ) Composition is continuous 

= Un<wiTn ° Pn) f is mediating . 

We conclude the proof by showing that the sequence (r^ o (3n)n<uj is increasing, hence such 
/ indeed exists. 

The last inequality holds because p^ ° Pn \Z id from the definition of embedding-projection 
pairs. □ 

Theorem A. 8 (Limit-colimit coincidence). Let Xq ^ Xi —!>••• be an uo-chain where each 
en is an embedding, and (X„ ^ C)n<Lu be the colimit over the chain. Then each an is an 

embedding, and the cone (C Xn)n<iu is a limit over the lo""^ -chain Xq ^ Xi ^ ■ ■ ■ . 

: colimit =^ ^^y^^^ s/ „p ■ limit 

Xq > > Xi > > ■■■ 

Dually, the limit of an 10°"^ -chain of projections consists of projections. By taking the 
corresponding embeddings we obtain a colimit of an oj-chain of embeddings. 

Proof. We prove the first statement. By Proposition IA.7I each an is an embedding, and 

gP f,p 

moreover {an)n<uj is an O-colimit. Now obviously {a^)n<Lu is a cone over Aq ^ Ai A ■ • • . 
Here we use the inherent coincidence of 0-(co)limits: namely, the condition that {an)n<Lu 
is an O-colimit is exactly the same as that {an)n<u is an O-limit. We use Proposition lA. 71 
to conclude the proof. □ 
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